Measuring Readiness for Automated Social Engineering

• This paper presents the result of a case study of the readiness of four large Swedish multinational corporations to deal with automated social engineering attacks. A preliminary study to review how the security policy of a large corporation deals with social engineering attacks was performed. The results from this study were combined with a conceptual model of social engineering when constructing a new interview protocol and a grading scale. This interview protocol was designed to measure the readiness of an organization to deal with social engineering attacks in general, and in this case with automated social engineering in particular. Four interviews were conducted with senior security managers and senior employees. Results indicate that no organization was over 60% on the readiness scale and thus all are considered at risk of attack.

Nyckelord

Automated social engineering

social engineering

readiness

security readiness measurements

web 2.0 security

cycle of deception

onlnine social networks

Technology

Teknik

Publikations- och innehållstyp

ref (ämneskategori)

kon (ämneskategori)